https://community.splunk.com/t5/Splunk-AppDynamics/PHP-agent-linux-agent-vulnerabilities-with-library/m-p/728824#M6400 <P>The latest version of the linux x64 php-agent (21.7.0.<SPAN>4560) is packaged with some out of date components: netty (4.1.38).<BR />Currently this has some CVEs logged against it:</SPAN></P><P><SPAN><A href="https://nvd.nist.gov/vuln/detail/CVE-2019-20445" target="_blank" rel="noopener nofollow noreferrer">CVE-2019-20445</A></SPAN></P><P><SPAN><A href="https://nvd.nist.gov/vuln/detail/CVE-2019-20444" target="_blank" rel="noopener nofollow noreferrer">CVE-2019-20444</A></SPAN></P><P><SPAN class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="RyanMansfield_0-1629734594781.png" style="width: 400px;"><span class="lia-inline-image-display-wrapper" image-alt="image.png"><img src="https://community.splunk.com/t5/image/serverpage/image-id/35104i9E6680240E8531CB/image-size/large?v=v2&amp;px=999" role="button" title="image.png" alt="image.png" /></span></SPAN></P><P><SPAN>under the path: /proxy/lib/tp/grpc-netty-shaded-1.24.0.jar</SPAN></P><P>Anyone know if this is something that can be patched, or if there is an intention to include a more up-to-date version in a future build?</P> Mon, 23 Aug 2021 16:08:20 GMT Ryan_Mansfield 2021-08-23T16:08:20Z https://community.splunk.com/t5/Splunk-AppDynamics/PHP-agent-linux-agent-vulnerabilities-with-library/m-p/728824#M6400 <P>The latest version of the linux x64 php-agent (21.7.0.<SPAN>4560) is packaged with some out of date components: netty (4.1.38).<BR />Currently this has some CVEs logged against it:</SPAN></P><P><SPAN><A href="https://nvd.nist.gov/vuln/detail/CVE-2019-20445" target="_blank" rel="noopener nofollow noreferrer">CVE-2019-20445</A></SPAN></P><P><SPAN><A href="https://nvd.nist.gov/vuln/detail/CVE-2019-20444" target="_blank" rel="noopener nofollow noreferrer">CVE-2019-20444</A></SPAN></P><P><SPAN class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="RyanMansfield_0-1629734594781.png" style="width: 400px;"><span class="lia-inline-image-display-wrapper" image-alt="image.png"><img src="https://community.splunk.com/t5/image/serverpage/image-id/35104i9E6680240E8531CB/image-size/large?v=v2&amp;px=999" role="button" title="image.png" alt="image.png" /></span></SPAN></P><P><SPAN>under the path: /proxy/lib/tp/grpc-netty-shaded-1.24.0.jar</SPAN></P><P>Anyone know if this is something that can be patched, or if there is an intention to include a more up-to-date version in a future build?</P> Mon, 23 Aug 2021 16:08:20 GMT https://community.splunk.com/t5/Splunk-AppDynamics/PHP-agent-linux-agent-vulnerabilities-with-library/m-p/728824#M6400 Ryan_Mansfield 2021-08-23T16:08:20Z https://community.splunk.com/t5/Splunk-AppDynamics/PHP-agent-linux-agent-vulnerabilities-with-library/m-p/728825#M6401 <P>Hi&nbsp;<A href="https://community.appdynamics.com/t5/user/viewprofilepage/user-id/145435">@Ryan.Mansfield</A>,</P> <P>Thanks for reporting this. Let me share this with the right people and I'll report back!</P> Mon, 30 Aug 2021 17:34:42 GMT https://community.splunk.com/t5/Splunk-AppDynamics/PHP-agent-linux-agent-vulnerabilities-with-library/m-p/728825#M6401 iamryan 2021-08-30T17:34:42Z https://community.splunk.com/t5/Splunk-AppDynamics/PHP-agent-linux-agent-vulnerabilities-with-library/m-p/728826#M6402 <P>Hello&nbsp;<A href="https://community.appdynamics.com/t5/user/viewprofilepage/user-id/145435">@Ryan.Mansfield</A>,</P> <P>We are actively working on fixing the vulnerability.</P> <P>Regards,</P> <P>Manasa H G</P> Thu, 02 Sep 2021 06:40:56 GMT https://community.splunk.com/t5/Splunk-AppDynamics/PHP-agent-linux-agent-vulnerabilities-with-library/m-p/728826#M6402 Manasa_H_G 2021-09-02T06:40:56Z